Attachment 872529 Details for Bug 1219550

fahclient.service

fahclient.service (text/x-dbus-service), 2.78 KB, created by Episteme PROMENEUR on 2024-02-07 10:33:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Episteme PROMENEUR

Created: 2024-02-07 10:33:01 UTC

Size: 2.78 KB

patch

obsolete

>[Unit]
>Description=Folding@Home V7 Client
>Documentation=https://foldingathome.org/support/faq/installation-guides/linux/
>After=syslog.target network-online.target remote-fs.target
>Wants=network-online.target
>
>[Service]
>Type=simple
>User=fahclient
>Group=fahclient
>RuntimeDirectory=fahclient
>RuntimeDirectoryMode=0755
>PIDFile=/run/fahclient/fahclient.pid
>WorkingDirectory=/var/lib/fahclient
>EnvironmentFile=-/etc/sysconfig/fahclient
>ExecStart=/usr/bin/FAHClient /etc/fahclient/config.xml --pid-file=/run/fahclient/fahclient.pid $FAHCLIENT_OPTIONS
># FAHClient 7.6.21 doesn't create a pid file any more
>ExecStartPost=/bin/sh -c "echo $MAINPID >/run/fahclient/fahclient.pid"
>#Actually not working, sending sigusr1 will stop fahclient instead of reloading config.
>#ExecReload=/bin/kill -SIGUSR1 $MAINPID 
>ExecStop=/bin/kill $MAINPID
>KillMode=process
>NoNewPrivileges=True
>CPUSchedulingPolicy=idle
>ProtectSystem=strict
>#ProtectClock=yes
>ProtectControlGroups=yes
>ProtectKernelLogs=yes
>ProtectKernelModules=yes
>ProtectKernelTunables=yes
>ProtectHostname=yes
>ReadWritePaths=/var/lib/fahclient/ /etc/fahclient/
># /tmp holds source files for nvcc required for CUDA on Nvidia GPUs
>PrivateTmp=True
>ProtectHome=True
># FAHClient is closed-source software and it downloads and executes closed-source folding cores.
># Some paranoia won't hurt by limiting the permitted syscalls as far as possible.
>SystemCallFilter=getpgrp geteuid setpgid mprotect futex rt_sigprocmask madvise gettid getpid set_tid_address rt_sigaction restart_syscall set_robust_list sched_yield sched_get_priority_max sched_get_priority_min fsync sysinfo accept4 wait4 eventfd2 pipe2 sched_getaffinity sched_setaffinity setpriority prlimit64  uname brk ioctl pipe socket setsockopt accept bind listen sendto shutdown pselect6 select recvfrom connect poll recvmsg getrandom mremap @basic-io @file-system @process
>SystemCallErrorNumber=EPERM
>SystemCallArchitectures=native
>CapabilityBoundingSet=
>RestrictAddressFamilies=AF_UNIX AF_INET
>RemoveIPC=yes
>RestrictNamespaces=yes
>RestrictSUIDSGID=yes
>RestrictRealtime=yes
>PrivateUsers=yes
>LockPersonality=yes
>
>[Install]
>WantedBy=multi-user.target
>
># Use `systemctl edit fahclient` to add the following (uncommented) lines to your service.
>#
>## In GPU only operation, the 'FAHCore_xx' process burns CPU power in a busy
>## loop. Using CPUAffinity the process 'fahclient' and it's childs can be
>## assigned to a single core. The clock frequency of this CPU can then be limited
>## to save power without affecting folding performance (see `man systemd.exec`).
>#[Service]
># ExecStartPre=+sh -c 'for c in 0 6; do cd /sys/bus/cpu/drivers/processor/cpu$c/cpufreq/ && cat cpuinfo_min_freq > scaling_max_freq; done'
># CPUAffinity=0,6
># ExecStop=+sh     -c 'for c in 0 6; do cd /sys/bus/cpu/drivers/processor/cpu$c/cpufreq/ && cat cpuinfo_max_freq > scaling_max_freq; done'

Actions: View

Attachments on bug 1219550: 872529